Category filter

Configuration profile to manage Safari settings on Macs

Creating a custom configuration profile for Safari settings can be extremely beneficial for organizations that want to specify certain browsing settings for employees. For instance, enabling the restriction that blocks third-party cookies enhances privacy by preventing advertisers from tracking browsing traffic across various sites. Other settings include managing autofill information, setting up data storage preferences, organizing bookmarks, or setting up plugins and extensions. This document helps you create a customized profile to manage Safari settings on macOS. Deploying this configuration profile across multiple devices is simplified through Hexnode’s Deploy Custom Configuration feature.

Disclaimer:


The sample configuration profiles provided below are created using various profile creator applications.

Custom configuration profile to customize Safari settings on Mac

Deploy this configuration profile to modify settings in Safari on macOS.

The following configurations can be customized.

Keys Descriptions
AskBeforeSubmittingInsecureForms This key is used to enable or disable the system to alert when a form is submitted to non-secure sites.

<true/> enables system alerts, which will help to prevent the unintended submission of sensitive data where it might be insecure.

<false/> disables system alerts, allowing uninterrupted form submissions to any website without alerts.

AutoFillFromAddressBook This key is used to specify whether Safari can autofill contact information from the device’s Address Book into web forms.

<true/> indicates that autofill for web forms from saved contact information is enabled, allowing automatic filling of forms to make it easier for the user.

<false/> indicates that autofill for web forms from saved contact information is disabled, which means the user needs to type in manually their contact details whenever required.

AutoFillMiscellaneousForms This key determines whether autofill for miscellaneous forms is enabled or disabled.

<true/> indicates that autofill miscellaneous form is enabled, auto-filling web forms using previously entered text, such as your name, address, email, and phone number.

<false/> indicates that autofill for miscellaneous forms is disabled, so users need to fill the forms manually.

AutoFillPasswords This key is used to configure whether autofill usernames and passwords in web forms is enabled or disabled.
<true/> indicates that the configuration for password autofill is enabled, facilitating faster logins.

<false/> indicates that the configuration for password autofill is disabled, necessitating the user to manually enter a password to enhance security.

AutoOpenSafeDownloads This key is used to enable or disable the system to automatically open files considered safe after they are downloaded.

<true/> indicates enabling the option to automatically open downloaded files considered safe by the system, automating the process for users by immediately accessing downloaded files.

<false/>indicates disabling the option to automatically open downloaded files and requires users to manually open files. This adds an extra layer of safety by preventing the automatic execution of malicious files.

BlockStoragePolicy The key is used to configure how Safari manages the storage of cookies and website data. It uses an integer value that specifies the access level granted for storing cookies and website data in Safari.
  • 0 – Allows all storage (cookies, local storage) without restrictions.
  • 1 – Block third-party cookies and data.
  • 2 – Blocks all cookies and site data except for the current website domain visited (Default value).
  • 3 – Allows data to be stored only on third-party websites that you have visited. It will block cookies from other third parties and non-visited domains.
  • 4 – Completely disable storing any site data and cookies.
BookmarksCollections IncludeAddressBook This key configures whether contacts from the Address Book are integrated into Safari’s bookmarks.

<true/>indicates that the configuration integrates contacts from the Address Book into Safari’s bookmarks for easy access.

<false/> indicates that the configuration excludes integrating contacts from the Address Book into Safari’s bookmarks, keeping bookmarks focused on web URLs.

BookmarksCollections IncludeRendezvous This key is used to include or exclude the local network services discovered via Rendezvous (also known as Bonjour) into Safari’s bookmarks.

<true/> indicates bookmarks enable the inclusion of Bonjour-discovered services in the bookmarks, facilitating quick access to network resources like local servers or printers directly from Safari.

The <false/>setting prevents including Rendezvous in bookmarks, limiting Safari to traditional web URLs such as those starting with http:// or https:// and excluding local network services from bookmarks.

BookmarksMenuIncludes BookmarksToolbar This key controls whether bookmarks saved in the bookmarks toolbar are also displayed in the bookmarks menu.

<true/>indicates that bookmarks from the toolbar are included in the main bookmarks menu.

<false/>indicates that bookmarks toolbar items are excluded from the main bookmarks menu.

BookmarksMenuIncludes Rendezvous

This key configures whether items from the bookmark’s toolbar are displayed within the bookmark menu in Safari.

<true/> indicates that Bonjour bookmarks are included in the bookmarks menu. This integration facilitates quick navigation to local services without manually entering their addresses, allowing Safari to display services such as local web servers or other networks directly in the bookmarks menu for easier access.

<false/> indicates that Bonjour bookmarks are not included in the bookmarks menu. As a result, Bonjour bookmarks, such as local web servers and other networks, will not be visible in the bookmarks menu.

DefaultBrowserPromptingState2

This key is used to set prompts for users to set Safari as the default browser, especially under specific conditions.

<integer>1 suppresses the prompt that normally appears when Safari is quit for the first time and if it is not set as the default browser. It typically prompts the user to either keep the current default browser or switch to Safari.

DefaultBrowserPromptingState3

This key is used to suppress the prompt asking users to change their default browser to Safari.

<integer>2 indicates that the prompt to “Make Safari your Default Browser?” is suppressed when Safari is launched and is not already set as the default browser.

DefaultDatabaseQuota

This key is used to configure the maximum local storage space allowed for the database.

<integer>5242880 (default 5MB) value specifies the limit of local storage database.

DidDisableIndividualExtensions AfterRemovingOnOff SwitchIfNecessary

This key is used to manage the behavior of individual Safari extensions when their respective on/off switch is removed from the Safari extensions preferences.

<true/> indicates that Safari will automatically disable any extensions that no longer have an on/off switch available in the browser settings.

<false/> allows the extensions to remain active even if their on/off switches are removed or not available, giving users or administrators more flexibility in managing extensions.

ExtensionsEnabled

This key is used to configure extensions from the App Store to be enabled/disabled in Safari. 

<true/>indicates that the extensions from the App Store are enabled.

<false/> indicates that the extensions from the App Store is disabled.

HistoryAgeInDaysLimit 

This key is used to configure the maximum number of days to retain browser history. After the pre-set day ends, the history will be removed automatically. 

<integer>31 (Default value) indicates that the browser history will be removed after one month. 

  • 1 – Deletes automatically after one day.
  • 7 – Deletes automatically after one week.
  • 14 – Deletes automatically after two weeks.  
  • 365 – Deletes automatically after one year. 
  • 4 – Completely disable storing any site data and cookies.
HomePage

This key determines the default URL that opens in new windows or tabs in Safari. 

NewTabBehavior 

This key is used to configure the content for a new tab that is opened in Safari. 

These values can define various configurations:  

  • 0– Displays Safari’s homepage in a new tab.
  • 1 – Opens a blank page in a new tab.
  • 2– Duplicates the current page as a new tab. 
  • 3 – Shows Safari’s Bookmarks in a new tab.
NewWindowBehavior

This key is used to set the content shown when opening a new window in Safari.  

These values can define various configurations:

  • 0– Displays Safari’s homepage in a new tab.
  • 1 – Opens a blank page in a new tab.
  • 2– Duplicates the current page as a new tab. 
  • 3 – Shows Safari’s Bookmarks in a new tab.
SendDoNotTrackHTTPHeader

This key enables or disables the sending of ‘Do Not Track’ requests to websites, which informs them that the user prefers not to be tracked. 

<true/>indicates that the sending of the ‘Do Not Track’ header is enabled.

<false/> indicates that the sending of the ‘Do Not Track’ header is disabled, allowing websites to track user activity.

TabCreationPolicy

This key is used to determine when to open a new tab instead of a new window in a browser. This policy can help manage how content is displayed and organized to enhance the user experience by keeping related pages within a single window. 

<Integer/>0 (Default value) helps manage how content is displayed and organized to enhance the user experience by keeping related pages within a single window.  

  • 0– Never opens a new tab or window. Content always opens in the current tab or window.
  • 1 – Automatically opens a new tab or window based on specific conditions. The browser will decide when to open a new tab or window. 
  • 2– New content always opens in a new window.
WarnAboutFraudulentWebsites

This key is used to enable or disable warnings about potentially fraudulent or malicious websites. 

<true/>indicates that warnings are enabled, which helps protect users from visiting websites that could be harmful or involved in phishing or scam activities. 

<false/> indicates that warnings are disabled, which increases the risk of visiting and interacting with malicious websites.

filterBlacklist

This key is used to block access to specific websites. When used in conjunction with ‘restrictweb’ and ‘useContentFilter’ enabled, it ensures that any URLs specified in the deny list are completely inaccessible to the user. 

<true/>indicates that it enables the blocklist (for specific URLs which is mentioned in the denylist) as long as ‘restrictweb’ and ‘useContentFilter’ are also enabled. 

<false/> deactivates the blocklist, allowing access to all previously blocked sites.

restrictWeb 

This key is used to enable or disable restrictions on web access to specific URLs. 

<true/> indicates that restrictions on web access for specific URLs are enabled.

<false/> indicates that restriction on web access is disabled and allows unrestricted access to the websites.

useContentFilter 

The key is used to enable or disable content filters on web access to specific URLs.

<true/>indicates that content filters on web access for specific URLs are enabled, thereby blocking or allowing access to those websites.

<false/>indicates that content filters on web access are disabled, allowing unrestricted access to all websites.

What happens at the device end?

Once the configuration profile is applied to Macs, Safari will be configured according to the specified settings in the profile. This profile sets up a specific homepage, manages access to specified URLs, blocks third-party cookies and site data, sets data storage limits, and manages autofill settings. Additionally, the profile configures the behavior of new tabs and windows and controls extensions.

Also, the device will have the corresponding settings modified. For instance, after deploying the configuration profile to manage AutoFill settings in Safari on Macs, the following changes will be reflected on the device:

Manage Safari settings on Macs - Configuring AutoFill customizations

Notes:

  • To create and customize configuration profiles, you can use tools like Apple Configurator, Profile Manager or manually create them using text editors. 
  • Use non-encrypted .mobileconfig, .xml, or plist files to deploy profiles across devices.
  • Ensure that you do not associate conflicting configurations with the devices.
  • Use wildcards to fetch key values from the portal.
  • It is recommended to manually validate the configuration profile on a system before executing it in bulk.
  • Hexnode will not be responsible for any damage/loss to the system on the behavior of the configuration profile.

  • Configuration Profile Repository